ajax请求头没带cookie,js ajax解决跨域请求，以及requestheader里没有cookie

一：解决ajax跨域请求问题

设置response.addheader的Access-Control-Allow-Origin属性

private ImmutableSet allowedOriginSet = ImmutableSet.builder()

.add("https://x.elong.com")

.add("https://m.elong.com")

.add("http://x.elong.com")

.add("http://m.elong.com")

.build();

@Override

public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)

throws Exception {

String originHeaderValue = request.getHeader("Origin");

if(allowedOriginSet.contains(originHeaderValue)) {

response.addHeader("Access-Control-Allow-Origin", originHeaderValue);

response.addHeader("Access-Control-Allow-Credentials", "true");

response.addHeader("Vary", "Origin");

}

return super.preHandle(request, response, handler);

}

二：ajax request header请求头里没有cookie问题

需要设置属性：xmlHttp.withCredentials = true;